Skip to content

Commit

Permalink
Update changelog
Browse files Browse the repository at this point in the history
  • Loading branch information
mjwolf committed Apr 26, 2024
1 parent c57e009 commit 8af7184
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 5 deletions.
3 changes: 1 addition & 2 deletions CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -94,8 +94,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]

*Auditbeat*
- Set field types to correctly match ECS in sessionmd processor {issue}38955[38955] {pull}38994[38994]
- Keep process info on exited processes, to avoid failing to enrich events in sessionmd processor {pull}39173[39173]

- Fix failing to enrich process events in sessionmd processor {issue}38955[38955] {pull}39173[39173] {pull}39243[39243]
- Prevent scenario of losing children-related file events in a directory for recursive fsnotify backend of auditbeat file integrity module {pull}39133[39133]


Expand Down
6 changes: 3 additions & 3 deletions x-pack/auditbeat/processors/sessionmd/add_session_metadata.go
Original file line number Diff line number Diff line change
Expand Up @@ -147,9 +147,9 @@ func (p *addSessionMetadata) enrich(ev *beat.Event) (*beat.Event, error) {

fullProcess, err := p.db.GetProcess(pid)
if err != nil {
m := fmt.Errorf("pid %v not found in db: %w", pid, err)
p.logger.Errorf("%v", m)
return nil, m
e := fmt.Errorf("pid %v not found in db: %w", pid, err)
p.logger.Errorf("%v", e)
return nil, e
}

processMap := fullProcess.ToMap()
Expand Down

0 comments on commit 8af7184

Please sign in to comment.